PT-2025-17519 · WordPress · Memberpress

Name of the Vulnerable Software and Affected Versions: Memberpress plugin for WordPress versions up to, and including, 1.11.37 Description: The issue allows unauthenticated attackers to extract sensitive data from restricted posts, such as those limited to higher-level roles like administrators,...

CVE-2025-28367

creationtimestamp| type| source ---|---|--- 2025-04-21 18:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7gvng2c 2025-04-21 19:49:41+00:00| seen| https://t.me/cvedetector/23453 2025-04-22 05:44:47+00:00| confirmed|...

CVE-2025-3857

creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12688 2025-04-21 18:31:51+00:00| published-proof-of-concept| Telegram/5EJUZnGupE7gi7RJmr2FV0ZRgpmrRFRfEIarwGmxg4P8ExE 2025-04-21 18:59:10+00:00| seen|...

CVE-2025-29660

creationtimestamp| type| source ---|---|--- 2025-04-21 15:02:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12669 2025-04-21 16:04:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114376800501667579 2025-04-21 16:13:56+00:00| seen|...

CVE-2025-3825

creationtimestamp| type| source ---|---|--- 2025-04-20 11:58:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnalvb6v6la2 2025-04-20 12:01:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12612 2025-04-20...

CVE-2025-3820

creationtimestamp| type| source ---|---|--- 2025-04-19 17:53:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114365904488230965 2025-04-19 20:59:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12597 2025-04-19 23:48:24+00:00| seen|...

CVE-2025-2010

creationtimestamp| type| source ---|---|--- 2025-04-19 02:59:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12558 2025-04-19 03:06:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln55ovf3sxo2 2025-04-19 05:30:45+00:00| seen|...

CVE-2024-57493

creationtimestamp| type| source ---|---|--- 2025-04-18 19:59:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12536 2025-04-18 20:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrghkyl2h 2025-04-18 23:16:13+00:00| seen|...

CVE-2025-24914

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12523 2025-04-18 19:42:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dtq37a5i2 2025-04-18 19:56:20+00:00| seen|...

CVE-2025-28233

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12513 2025-04-18 19:39:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk5gt4lk2 2025-04-18...

CVE-2025-28238

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12509 2025-04-18 19:35:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dkfhnafy2 2025-04-18...

CVE-2025-3786

creationtimestamp| type| source ---|---|--- 2025-04-18 09:59:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12413 2025-04-18 11:15:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3ikuqwlji2 2025-04-18...

CVE-2025-42599

creationtimestamp| type| source ---|---|--- 2025-04-18 03:57:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12386 2025-04-18 04:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114357156027593391 2025-04-18 06:23:52+00:00| seen|...

NamelessMC 资源管理错误漏洞

NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. For your Minecraft server, which contains tons of features. A resource management error vulnerability exists in NamelessMC 2.1.4 and earlier versions, which stems from forums that allow the posting of...

CVE-2025-27308

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmstactics WP Video Posts wp-video-posts allows Reflected XSS.This issue affects WP Video Posts: from n/a through = 3.5.1...

CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

CVE-2025-23773 WordPress Delete All Posts plugin <= 1.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: through 1.1.1...

CVE-2025-23773

CVE-2025-23773 concerns the WordPress Delete All Posts plugin (mingocommerce) with versions n/a–1.1.1, where a Missing Authorization vulnerability stems from incorrectly configured access control. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) indicates no network privileges required, ...

CVE-2025-27308 WordPress WP Video Posts plugin <= 3.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmstactics WP Video Posts wp-video-posts allows Reflected XSS.This issue affects WP Video Posts: from n/a through = 3.5.1...